The Sandworm group, a less famous but familiar relative of Cozy and Fancy Bear, is working against the Spiez Laboratory, as Swiss facility performing forensic work on the Novichok attack against a former GRU officer in the UK. That attack has since claimed two additional victims, including one who lost her life, through what appear to be residual samples of Novichok agent staged in England. Russia has denied involvement in the chemical attack, but few believe this.
Facebook ejected thirty-two questionable accounts from its platform for engaging in what Facebook characterized as "inauthentic behavior." There's some evidence that the accounts are connected with the Internet Research Agency, the St. Petersburg troll farm implicated in earlier influence operations. This round of influence seems aimed at inflaming the alt-left against the alt-right, which makes perfect sense if the goal is disruption and chaos.
Finland is on alert for increased Russian influence operations.
Amnesty International says that at least one of its people had their phone infected with NSO Group's Pegasus spyware tool. Pegasus has been used by a number of governments to monitor dissent. The University of Toronto's Citizen Lab has confirmed the infection. The targets in this case appear to be Saudi dissidents.
Sophos Labs reports that ransomware payments to the controllers of SamSam ransomware have now amounted to $6 million.
Yale University has realized that it was subjected to a data breach in 2008 and 2009. They don't know who did it, but they advise victims to protect their identity.